F-TRICKL - Scanner and disinfector for the Tentatrickle virus
Copyright (c) 1996 Data Fellows Ltd

OVERVIEW

F-TRICKL will detect and disinfect the Tentatrickle virus.
This document gives a brief description of the Tentacle virus and
explains how to use F-TRICKL to detect and disinfect this virus.

ABOUT THE TENTATRICKLE VIRUS

This DOS-based virus was found in the wild in September 1996.

The virus infects only DOS executables (MZ). The virus adds a
new segment to the executable and modifies the structure of the file.

The author of this virus also wrote the Tentacle and Shell
viruses.


SYMPTOMS

Tentacle causes no obvious symptoms, except slowing the PC down (the
infection process is slow). For this reason it is recommended that
suspect PCs be scanned using the F-TRICKL utility.


HOW TO USE F-TRICKL

Run F-TRICKL with the drive letter of directory as a parameter. For example:

        F-TRICKL C:
        F-TRICKL Z:\USERS

If F-TRICKL finds the virus, you will be notified. Then, type
F-TRICKL <drive parameter> /DISINF, and F-TRICKL will disinfect
any infected files.


WHAT ABOUT FLOPPIES?

Since infected files may have been copied to floppy diskettes, you
will want to scan your floppy diskettes as well. To do this, invoke
F-TRICKL using the /MULTI switch (eg F-TRICKL A: /MULTI).

--

F-TRICKL by Peter Szor, Data Fellows F-PROT Professional Development.

F-TRICKL is protected by international copyright laws. F-TRICKL is (c)
1996 Data Fellows Ltd, and it is not in public domain or freeware, but
you are free to use and share this software with no charges in
non-commercial private use. Use of this software in other environments
is not allowed in Europe, Asia and Africa without a license to F-PROT
Professional or a current license from Frisk Software International.
To purchase a license, contact your local distributor listed in
PRO.DOC. Please redistribute F-TRICKL only with this documentation. You
are not allowed to resell this software for your own profit (normal
copying costs excluded) or claim to hold rights to this software.
Although you may have the right to use F-TRICKL, it will remain the
exclusive property of Data Fellows. Data Fellows does not warrant that
the software is error free and we will not cover any costs created by
function or malfunction of this program. Data Fellows also disclaims
liability for possible consequential damages. If you cannot agree to
these restrictions, you should not use F-TRICKL.

Copyright (c) 1996 Data Fellows Ltd, Finland

                 Data Fellows Ltd
                 Paivantaite 8
                 FIN-02210 ESPOO
                 FINLAND
                 tel:    +358-9-478 444
                 fax:    +358-9-478 44 599
                 e-mail: F-PROT-Support@DataFellows.com
                 www:    http://www.DataFellows.com/
